FedRAMP Technical ISSO / Systems Assessment Analyst

Job Title

FedRAMP Technical ISSO / Systems Assessment Analyst

Location

Remote (U.S. Only)

Job Summary

STAFFXPERT LLC is seeking a FedRAMP Technical ISSO / Systems Assessment Analyst on behalf of our client in the United States. The ideal candidate will support cybersecurity assessment, authorization, and continuous monitoring of cloud service provider (CSP) systems in alignment with federal security standards.

This role requires strong hands-on experience in FedRAMP, NIST Risk Management Framework (RMF), and system security assessments. The position involves evaluating system architectures, validating security controls, supporting Authorization to Operate (ATO) activities, and ensuring ongoing compliance with federal cybersecurity requirements.

Key Responsibilities

• Conduct technical and architectural security assessments of cloud-based systems, including infrastructure, platform, and application layers.

• Evaluate implementation of security controls such as encryption, identity and access management (IAM), MFA, logging, monitoring, and vulnerability management.

• Lead technical discussions with vendors to review system architecture, data flows, and control implementation.

• Review vulnerability assessments and penetration testing reports and validate remediation efforts.

• Analyze FedRAMP authorization artifacts, including System Security Plans (SSPs), Security Assessment Reports (SARs), POA&Ms, and related documentation.

• Support FedRAMP authorization activities including ATOs, reauthorizations, and continuous monitoring.

• Track and manage POA&M items, remediation progress, and compliance risks.

• Ensure security packages align with FedRAMP and NIST requirements and federal cybersecurity standards.

• Serve as ISSO for assigned systems and ensure adherence to federal security frameworks and policies.

• Collaborate with cross-functional teams including IT, security, compliance, and external vendors to address security gaps and strengthen controls.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Engineering, or related field (or equivalent experience).

• 4 - 6 years of experience in cybersecurity, information assurance, or IT security roles.

• At least 2+ years of experience supporting NIST SP 800-53-based Risk Management Framework (RMF) or A&A activities.

• Experience in system security assessments, preferably as an ISSO, Security Engineer, or Security Control Assessor (SCA).

• Hands-on experience with FedRAMP assessments, authorization packages, and continuous monitoring processes.

• Strong understanding of NIST SP 800-53, NIST SP 800-171, FISMA, and FedRAMP requirements.

• Familiarity with vulnerability management tools and security assessment methodologies.

• Strong analytical, communication, and documentation skills.

• Ability to work with both technical teams and non-technical stakeholders.

Preferred Qualifications

• Certifications such as Security+, CISSP, CISM, CISA, CCSP, or CGRC.

• Experience supporting federal government cybersecurity programs.

• Exposure to cloud security architectures and compliance frameworks in enterprise environments.